Cisco Systems Carrier Routing System Craft Works Interface CRS-1 Series user manual

Summary of the content on the page No. 1

CHAPTER 4
User Administration Application
The User Administration Application contains the following tabs and subtabs:
• Users Tab, page 4-3
• User Groups Tab, page 4-3
• Task Groups Tab, page 4-5
• AAA User Tasks Window, page 4-6
The router user attributes form the basis of the router operating system administrative model. Each router
user is associated with the following attributes:
• User ID (ASCII string) that identifies the user uniquely across an administrative domain (maximum
of 253 chara

Summary of the content on the page No. 2

Chapter 4 User Administration Application Router control, configure, or monitor operational tasks are represented by task IDs. A task ID defines the permission to execute an operation. Users are associated with sets of task IDs (a task group) that define their authorized access to the router. Task IDs are assigned to users through the following means. Each user is associated with one or more user groups. Every user group is associated with one or more task groups. In turn, every task group

Summary of the content on the page No. 3

Chapter 4 User Administration Application Users Tab Users Tab Each user is identified by a username that is unique across the administrative domain. Each user must be a member of at least one user group. Deleting a user group may orphan the users associated with that group. The Users tab allows you to perform the following tasks: • Set the password for a username. • Assign a username to user groups. See Figure 4-1 for an example of the Users tab. Table 4-1 describes the Users tab fields.

Summary of the content on the page No. 4

Chapter 4 User Administration Application User Groups Tab Figure 4-2 User Groups Tab Table 4-2 User Groups Tab Description Field Description User Group Configuration Area Name field Allows you to enter a user group name. Description field Allows you to enter a description of the user group. User Groups Area Selected User Displays the user groups the user group is associated with. Groups list Click the Add button to add a user group. This button opens a User Group dialog box, allowing you

Summary of the content on the page No. 5

Chapter 4 User Administration Application Task Groups Tab Task Groups Tab Task-based authorization employs the concept of a task ID as its basic element. A task ID defines the permission to execute an operation for a given user. Each user is associated with a set of permitted router operation tasks identified by task IDs. Users are granted authority by being assigned to user groups that are in turn associated with task groups. Each task group is associated with one or more task IDs select

Summary of the content on the page No. 6

Chapter 4 User Administration Application AAA User Tasks Window Table 4-3 Task Groups Tab Description Field Description Task Group Configuration Area Name field Allows you to enter a task group name. Description field Allows you to enter a description of the task group. Tasks table Allows you to enable and disable the following classes for each task: • read • write • execute • notify Checking the check box for a task enables the class for the task. If the check box is unchecked, the class

Summary of the content on the page No. 7

Chapter 4 User Administration Application AAA User Tasks Window Figure 4-4 AAA User Tasks Window Cisco CRS-1 Series Carrier Routing System Craft Works Interface Configuration Applications Reference Guide OL-5497-01 4-7

Summary of the content on the page No. 8

Chapter 4 User Administration Application AAA User Tasks Window Cisco CRS-1 Series Carrier Routing System Craft Works Interface Configuration Applications Reference Guide 4-8 OL-5497-01